Fetching from the wire…
01
02
03
04
05
06
07
08
Public story · 2026-08-25 · high
The proof-of-concept works against any dsh web instance reachable beyond localhost, no login required.
Why now: The exploit code has been public since August 21.
ChaoMixian released dsh2shell on GitHub August 21, a Python proof-of-concept for unauthenticated remote code execution against DeepSeek Harness web instances. Anyone running a dsh web instance reachable beyond localhost can be taken over with no login required. The repository doesn't say how many instances are exposed that way, or whether ChaoMixian reported the bug before publishing exploit code for it.
Separately, the dshplugin/dsh-plugin-hub project lists a catalog of more than 4,000 community plugins, installable from inside the app's settings panel and updated daily. A compromised or malicious plugin installed through that panel would need no separate vulnerability to reach a user's instance. The hub doesn't describe a review process for what gets into that catalog before it's available to users.
Anyone with a dsh web instance exposed beyond localhost should close off network access or patch it. Reviewing the installed plugin list is a sensible next step on the same pass.
Each link below shares sources, entities, or timing with this story.
A Chinese lab shipped a runtime that manages two American coding agents as subagents, and it went from repo creation to 145,439 stars in four days. deepseek-ai/deepseek-harness published dsh-v0.1.0-rc.7 at 12:01 UTC today, its first tagged release since the repo appeared on Au...
Q00/ouroboros (5,449 stars, MIT) made dsh a first-class completion backend driving DeepSeek Harness's ACP automation server across its interview, seed, QA, and evaluate loop (GitHub). Two details to steal. OUROBOROS_DSH_CONFIG_PATH went into the untrusted .env denylist because...
anywhere-labs/deepseek-harness-desktop (MIT, created August 13) packages the official harness into an Electron app so users skip installing Node.js and launching the local Web UI by hand (GitHub). It ships macOS Apple Silicon DMG and Windows x64 installers through its own doma...
86,600 stars. Six third-party plugin repos above 450 stars. Two of them created *before* the public repo existed. DeepSeek released DeepSeek Harness (dsh) on August 13 under MIT. Every capability is a swappable plugin: models, tools, skills, sessions, sandboxes, storage, loops...
deepseek-harness, created August 13, is at 190,635 stars and 21,319 forks, up from about 173,700 on August 20, so the curve hasn't flattened. It makes models, tools, skills, sessions, sandboxes, storage, the agent loop, scheduling and UI all pluggable under a mounting layer ca...
v0.1.1-rc.1 shipped August 21 at 07:12 UTC, fixing a hole where confined processes could escape sandbox restrictions, alongside adding the V4-Flash-Vision-Exp model to the DeepSeek adapter. GitHub If you're running DSH agents unattended, this one isn't optional.
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.